On page 14, line 11, please chajar^k^^mpWiple use" to — multiple-use — . 
On page 15, line 13, please chwig^^e offered" to — is offered — . 
On page 15, line 18, please ch^e,"or a tailor" to — (or a tailor) — . 
On page 15, line 18, please chMge "oj>^yle and measurements" to — (or style 
and measurements) — . 

On page 18, line 21, please ch^ge/per object" to — per-object — . 
On page 18, line 22, please changt "paying to the user 103" to — paying — . 

IN THE CLAIMS 

Please ameiia claims 1, 5, 14, 19, 22-23, and 25-30 as follows. 



(Twice Amended) A method for automatically disbursing a [user's] first 
parfys personal information to a [requester] receiving party authorized by the [user] first 
party byOransmitting said [user's] first party's personal information from a server 
computer o^rated by a service provider, said server computer coupled to a database, the 
method composing the steps of: 

establishing an account for the [user] first party with the server computer; 
assigning an identifier to the [user] first party : 

entering the [use^sl first party's personal information, said [user's] first party's 
personal information compr^ing at least one of a plurality of information objects; 

assigning at least one oiSa plurality of security levels to each information object^ 
thereby enabling access to individually selected portions of the user's personal 
information by individual receiving pwies : 

storing in the database the [user] fW party identifier, the information object and 
the security level assigned to the information olyect; 

receiving a request [from a requester], saidv^^equest [message] comprising at least 
the [user] first party identifier; 

in response to the request, selecting a first portiori\)f the first party's personal 
information objects that could be transmitted to a receiving p^tv: 
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retrieving from the database the [information object pertaining to the user 
identifler] selected first portion of personal information objects : and 

securely transmitting the retrieved first portion of personal information objects to 
the [requestbj'l receiving party. 




5. (Afqended) The method of claim 1, further comprising the step of recording 
every access o^the ^(user's! first party's personal information to create an audit trail. 




(Amended) ^l^e method of claim 1, further comprising the steps of: 
altering the [user's hfirst party's personal information; and 
storing said altered p^bqal information in the database. 






19. (Amended) The method of cl^im 1, wherein the [user's] first party's personal 
information includes the [user's] first party^ ontact information; health-related 
information; medical, dental information; crediyfemployment information; insurance 
information; property-related information; personal oemographic information; family 
medical history; biometric/genetic information; travel/hotel preferences; internet 
preferences; sartorial, fashion preferences; magazine, moviesSbook preferences; leisure 
j)references>Rre^^ for billing or paymen^ethods, or pleasbce-^ preferences. 

~22. (Amended) ^^T^he method of claim 1, wherein the step of receivin^^a^request 
message from the requester<x)mprises the step of: 

receiving a query for th^^ser's] first party's personal information in a readily 
executable form. 



The method of claim 1, wherein the step of receiving a request 
[message] from the [rewesler Heceiving party comprises the step of: 




receivmg a query for the [user^s]"first^a^^ 
Query Language format. 



rmation in a Structured 




25. (Amended) A method for aut^mdcaliy^tmrsing a fuser's Nfirst party's 



p^sonal information to a [requesting] receiving party, the method comprising: 

step for inputting the [user's] first party's personal information, said [user's] first 
party's personal information comprising at least one of a plurality of information objects; 

step^r associating with each information object at least one of a plurality of 
security clearance levels , thereby enabling access to individually selected portions of the 
user's personal inihrmation : 

step for recoroh^ each information object and th^ associated security clearance 
[levels] level(s) : 

step for selecting a fihtportion of tfieflcst^arty's personal information objects 
that could be transmitted to a receiving party, said selection being made in accordance 
with criteria established by the first party or in response to a request from the receiving 
party: 

step for inputting an authorization k^to access the [user's] first party's personal 
information; 

step for determining a response message to"^ sent; and 
step for outputting the response message. 



26\ (Amended) [Computer-executable program code stored on computer-readable 
mediuik said code comprising:] A program storage device readable by a processor, said 
storage devke tangibly embodying a program of instructions executable by the 
processor, said^ogram of instructions comprising: 

[code] progrkn of instructions to store a [user's] first party's personal 
information, said [user^ sfirst party's personal information comprising at least one of a 
plurality of information obje 

[code] program of instructions to associate each information object with a first 
security clearance level; 

[code] program of instructions to rfeceive a request message to access the [user's] 
first party's personal information, said requesbsOiessage comprising an authorization key 
to access a first portion of the [user's] first party' s ^ersonal information, said 
authorization key indicative of a second security cleark^ce level; 

[code] program of instructions to compare the firsrsecurity clearance level and 




S{he second security clearance level to determine an appropriate overall clearance level; 

[code] program of instructions to match the request message and the overall 
elegance level with a second portion of the [user's] first party's personal information; 
and 

:ode] program of instructions to securely transmit the second portion of the 
[user's] first party's personal information. 

27. (Amenaed) The [computer-executable program code] program storage device 
of claim 26, further comprising: 

[code] progran of instructions to authenticate the request message. 

28. (Amended) Tnk [computer-executable program code] program storage device 
of claim 26, further comprising: 

[code] program of instructions to establish a secure audit trail of each access of 
the [user's] first party's personal it^formation. 

29. (Amended) The [computer-e^cutable program code] program storage device 
of claim 28, wherein the [code] program of instructions to establish a secure audit trail 
include[s] [code] program of instructions to record an identifier to identify [the requester] 
a party that receives the first party's personal infoknation . 



30. (Amended) The [computer-executable progr^n code] program storage device 
of claim 28, wherein the [code] program of instructions to e^blish the secure audit trail 
[isl are configured to record an identifier to identify the request^ 



Please 




following new claims. 



7^ 

(New) A computing system comprising a first computer communicatively 



connected to a comiTitmication network and confi 
connected to the network to store 



red (a) to enable a first party 
s personal information in a central 
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tepository, said repository operably coupled to the first computer, said first party's 
pe!;sonal information including the first party's contact information, and (b) to transmit, 
in response to a request message received via the network in a standardized protocol 
format,\t least a first portion of the first party's personal information retrieved from the 
repository\whereby when the first party attempts to do business with or to utilize an 
offering made by the second party the need to provide said first portion of personal 
information bjNthe first party to the second party is obviated. 



32. (New) The (^omputing system as in cl^ii^i 31, wherein the repository is a multi- 
level repository. 

33. (New) The compu^g system ^s in claim 31, wherein each of the first party's 
personal information objectsis assigned at least one of ^ plurality of security clearance 
levels. 



34. (New) A service provider-operated centralized multi-level secure repository 
coupled to a first computer, said first computer coupled to a data communication 
network, wherein the repository is configured to store at least the first party's 
identification information, contact information and credit information, wherein each of 
the identification information, contact informatftmi and credit information is assigned at 
least one of a plurality of security clearance levels^whereby upon receiving, via the 
communication network, a request and/or a token frona a second party, upon verifying 
the identity of the first party and the authenticity of the steond party, the first party's 
credit information is automatically provided to a designatedsparty, thereby enabling a 
user to engage in an online commercial transaction. 

35. (New) The repository as in claim 34, wherein the security cl^ance levels are 
assigned by the first party. 



36. (New) The repository as in claim 34, wherein the security clearance leV^ls are 
assigned by a party other than the first party. 



-6- 



sTZ. (New) A method of securely disbursing a first party's personal information to a 
second party, the method comprising the steps of: 

creating an online repository for the first party's personal information, said 
personak information comprising the first party's identification information and the first 
party's credit information; 

receiving a request from a second party, the request comprising at least a portion 
of the first partyC s identification information and a token, said token configured to enable 
a single access ofihe first party's personal information; and 

transmitting \t least a portion of the first party's credit information to a 
designated party. 

38. (New) The method W claim 37, wHerein said authorization key is configured to 
expire after a predetermined period of time\ 

39. (New) A communication system comprising: 

first storage medium configured to store a first party's personal information, said 
personal information including a plurality of information objects; 
first processor coupled to the first Storage medium; and 

first memory coupled to the first processor, said first memory configured to store 
instructions to direct the first processor to dovraload selected portions of the first party's 
personal information to a second memory respor^ve to an authorization key, said token 
configured to enable a single access of the first party's personal information. 



40. (New) A method of providing a selected'^ortion of a first party's personal 

information to a second party comprising the steps of: 

receiving a plurality of information objects from the fkst party at a secure 
centrally located first computer operated by a service provider; 

assigning at least one of a plurality of security clearance le^ls to each 
information object; 

storing the information objects and the at least one of a pluralit^of clearance 
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levels assigned to each information object in a storage device coupled to the first 
computer; 

configuring a token to access a predetermined first portion of the stored 
inforn^tion objects within a predetermined expiration time period and/or for a number of 
times during before the expiration of the predetermined expiration time period, the token 
providing access to the predetermined first portion of the first party's stored personal 
information objects to a second party; 

receiving^ request via a computer netv^ork, said request indicative of a subset of 
stored first party's personal information objects; 

electronically pi;esenting the token to the first computer; 
determining a security clearance leveVof the received request; 
retrieving a second portion of the predetermined first portion of stored personal 
information objects that are ar^r below the j^ecurity clearanpe level of the received 
request; and 

transmitting, in an electronic form, information objects so as to enable a form to 
be filled with data contained in the information objects. 

41. (New) A computing system configured to obviate the need for providing a first 
party's personal information comprising: 

a first computer connected to a commuiHcation network and configured (a) to 
enable a first party connected to the network to store the first party's personal 
information in a central repository, said repository operably coupled to the first 
computer, said first party's personal information including the first party's identification 
information, and (b) to transmit, in response to a request message, at least a first portion 
of the first party's personal information retrieved from the repository, said first portion 
being the portion authorized to be transmitted in response to the request message, 
whereby the first portion of the first party's personal information\is automatically 
provided, thereby obviating the need for the first party to provide th^ first portion of the 
first party's personal information. 

42. (New) The computing system as in claim 41, wherein the repositor^is a multi- 
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